Installing an SSL certificate on Lotus Domino Server versions 4.6x and 5.0x

Installing your site certificate on Lotus Domino Server requires that the certificate for your domain name, along with its Root and Intermediate certificates, be merged into the Key Ring file. The Root and Intermediate certificates allow visitors' browsers to recognize your certificate as authentic.

Part one: Download and save certificates

1. Open the email we sent you, that contains the certificate for your domain name.

2. Copy the certificate, including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.

3. Paste the certificate into a blank document in a text editor. Use an editor that will not add characters, such as TextPad.

4. Save the document. We recommend that you name it YourDomainName.crt and save it in your Web server's default directory for SSL certificates.

   We recommend that you also back up your certificate on another computer or storage device.

5. Confirm which certificate you purchased, and determine which set of Root and Intermediate certificates to download.

   To confirm which certificate you purchased, review your order confirmation.

   • If you purchased SBS Instant, download set A below.

   • If you purchased SBS Secure or Secure Plus, download set B below.

   A -- SBS Instant

   • Instant Validation UTN Global Root CA
   • Instant Validation AddTrust Intermediate 1 CA
   • Instant Validation SBS Intermediate 2 CA

   -OR-

   B -- SBS Secure and Secure Plus

   • Full Validation AddTrust Root CA
   • Full Validation Intermediate CA

6. Download the Root-Intermediate set for your domain name certificate. To download, right-click each certificate file name and select Save Target As.

   Save the Root and Intermediate certificates to the same directory where you saved the certificate for your domain name.

Part two: Install Root and Intermediate certificates

1. In Notes, from the administration panel, click System Databases and choose Open Domino Server Certificate Administration (CERTSRV.NSF) on the local machine.

2. Click Install trusted Root Certificate into Key Ring.

3. Enter the file name for the Key Ring that will store this certificate. The Key Ring file was created when you created the server Certificate Signing Request.

4. Select File in the Certificate Source field. Enter the file name of your Root certificate in the file name field.

5. Click Merge Certificate into Key Ring.

6. Enter the password for the server key ring file and click OK to approve the merge.

7. Repeat the process for your Intermediate certificate or certificates:

   • For SBS Instant, repeat for file *Intermediate1CA.crt, then for *Intermediate2CA.crt.

     -OR-

   • For SBS Secure or SBS Secure Plus, repeat for *Intermediate3.crt.

Part three: Install your site certificate

1. Click Install Certificate into Key Ring.

2. Enter the file name for the Key Ring that will store this certificate. The Key Ring file was created when you created the server Certificate Signing Request.

3. Select File in the Certificate Source field.

4. Enter the file name of your site certificate in the file name field.

5. Click Merge Certificate into Key Ring.

6. Enter the password for the server key ring file and click OK to approve the merge.

For additional information, refer to your server documentation.